Vulnerabilities > CVE-2021-22806 - Incorrect Resource Transfer Between Spheres vulnerability in Schneider-Electric products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
schneider-electric
CWE-669
NVD
Published: 2022-02-11
Updated: 2022-02-22

Summary

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk (V2.6.1 and prior), Wiser for KNX (V2.6.1 and prior), fellerLYnk (V2.6.1 and prior)

Vulnerable Configurations

Part Description Count
OS
Schneider-Electric
21
Hardware
Schneider-Electric
3

Common Weakness Enumeration (CWE)

References